Please see our Privacy Policy information below, or you can view our Privacy Policy video here.
Privacy Notice
This privacy notice describes the information we collect when you use our services. We act as data controllers when we collect this information, and by law, we are required to provide you with information about us, why and how we use your data, and what rights you have over your data.
Who are we?
We are EYECAN (the “Data Controller”). meaning we are responsible for deciding how we hold and use personal information. We are also registered with the Jersey Office of the Information Commissioner (“JOIC”) – Registration No. 19598
EYECAN collects and uses your information to inform you about events and keep you updated on the work we are doing. We are data controllers in relation to the processing of personal information that you provide us when you use our services.
This policy explains:
- The types of information we collect about you
- The purposes for which we use that information
- Who we may share your information with
- How long will we keep information about you for
- Where the information about you is stored
- The rights you have under data protection legislation
- Contact details if you have any queries or concerns about what is said in this notice
Terms used
Originally registered as the Jersey Blind Society, we will be referred to as EYECAN for this notice.
“Data protection laws” means the Data Protection (Jersey) Law 2018, Data Protection (Bailiwick of Guernsey) Law 2017, General Data Protection Regulation, UK General Data Protection Regulation, Data Protection Act 2018 and any other data protection law relevant to this notice.
“personal data” means any information relating to a living individual who can be identified directly or indirectly from the information.
“special category data” means data relating to your health (including mental health), genetic data, and biometric data processed to identify an individual uniquely and ethnically.
The Data Protection Officer (“DPO”)
We have appointed a DPO to oversee compliance with this Privacy Notice.
If you have any questions about this Privacy Notice or how we handle your personal information, contact the DPO at info@eyecan.je
You have the right to complain to the JOIC at any time.
Contact details for these are outlined at the bottom of this Privacy Notice.
The Kind of Information We Hold About You
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
To explain this, we will list our different services when we collect or use additional information about you.
How Is Your Personal Information Collected?
When you contact us, we collect personal information about you, engage us to attend one of our events or provide us with your data for another specific purpose.
What information do we collect about you?
As a client:
As a Donor or purchaser of fundraising tickets:
External users (As a hirer of our Westlea Centre):
|
|
What Special Category Data do we collect about you?
EYECAN will only collect data relevant to your ability to gain access to one of our services. This data will be any information relating to your health condition and general mobility, which is special category data under Article 9 of the DPJL.
What Special Category information do we collect about you?
|
|
How We Will Use Information About You?
We will only use your personal information when the law allows us to.
Most commonly, we will use your personal information in the following circumstances:
- Where you have entered into a contract with us to provide you with a service. This would be when you become a client of EYECAN.
- Where we need to comply with a legal obligation. This would be when we have to comply with a lawful authority to disclose information in case of a vulnerable adult.
- Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. An example of this is when we send you updated information about a service you have had from us in the past that we feel you may be interested in.
Change of purpose
We will only use your personal information for the purposes we collected it unless we reasonably consider that we need to use it for another reason. That reason is compatible with the original purpose.
If we need to use your personal information for an unrelated purpose, we will notify you and explain the legal basis that allows us to do so.
Data Sharing
We do not pass on information gained from your engagement with us without a clear legal basis. However, we may disclose your Personal Information to meet legal obligations, regulations, or valid governmental requests.
We use certain third parties, or Processors, to provide or support our services. We have appropriate agreements with those processors to ensure the safety of your information. For information on these processors, please see the table below. We do not share your information with any processors for direct marketing purposes.
The current data processors used by EYECAN are:
| Data Processor Name | Reason | Link to the privacy notice |
| Microsoft 365 |
|
https://www.intuit.com/privacy/statement/
|
| Focussed IT (365) |
|
https://focusedit.co.uk/ |
| Core Focus (CRM) |
|
Privacy Policy – CorefocusX |
Processors are other organisations/services carefully chosen by EYECAN to process your information correctly and securely. In the case of organisations outside of Jersey, the United Kingdom and the European Economic Area (EEA):
(a) we have prior written instructions for the transfer or
(b) We have entered specific contractual terms with them to ensure that they treat your personal data in a way equivalent to what they would be required to do if they were established in Jersey.
We ensure that your privacy rights are respected in line with this notice and the same protection is given to your data as laid down by the DPJL.
Data Security
We have implemented appropriate security measures to prevent your personal information from being accidentally lost, altered, disclosed, or accessed unauthorised. In addition, we limit access to your personal information to those Staff, Agents, Contractors and other third parties on a need-to-know basis.
They will only process your personal information on our strict instructions and are subject to a duty of confidentiality.
Details of these measures may be obtained from our DPO.
We have put in place procedures to deal with any suspected data security breach and notify you and any applicable regulator of a suspected breach where we are legally required.
Data Retention
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including to satisfy any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data and the potential risk of harm from unauthorised use or disclosure of your data. The purposes for which we process your data and whether we can achieve those purposes through other means and the applicable legal requirements.
You can request our Data Retention Schedule from our DPO if required.
In some circumstances, we may anonymise your personal information so that it can no longer be associated with you, in which case we may use it without further notice.
Access to and control of your personal information
Rights of Data Subjects
You may have certain legal rights concerning the Personal Information processed by EYECAN under DPJL.
- the rights of access;
- right to have your data corrected, updated, rectified or erased;
- right to object to the processing of or restrict the processing of your data;
- right to withdraw your consent previously given to the processing of your data and to
- request the transfer of your data to another party.
Please note that the rights set out above are subject to certain exemptions and conditions. We may decline to comply with any request to access, correct, delete or restrict the use of your information if there is a specific legal ground or exemption.
Where we are processing your information based on contractual necessity or legal and regulatory requirements, the provision and processing of such information will likely be mandatory. In addition, where the provision of your Personal Information is generally a contractual or legal requirement or is a requirement for us to enter into a contract if you choose not to provide any Personal Information or to exercise one or more of the rights above to restrict the processing of your information, this may limit the services which EYECAN can provide.
If you wish to exercise any of your rights, send your request to info@eyecan.je We will respond to your request in accordance with Data Protection Legislation.
We reserve the right to ask for proof of your identity and address (such as a copy of your driving license or passport – please do not send any original documents), and we also further reserve the right, under DPJL, to request for additional information reasonably required to identify the specific information being requested or referred to, or any additional information reasonably required to confirm your identity.
You can use the Data Subject Access Request link on our website to complete our online form. If you have any questions about this process or your rights, contact our DPO. You can also email or verbally make your request over the telephone to one of our team, whatever way you feel more comfortable with it.
We will respond to your request without undue delay, but certainly within Four Weeks after satisfactory identity verification. In some circumstances, we can apply an eight-week extension to this time frame if the request is complex and cannot be answered in four weeks. If this is to happen, we will inform you as soon as possible.
Right to Withdraw Consent
In the limited circumstances where you may have provided your consent to collect, process and transfer your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time.
To withdraw your consent, contact our DPO at info@eyecan.je
Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to unless we have another legitimate basis for doing so in law.
Changes to this Privacy Notice
We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates.
We may also notify you in other ways from time to time about processing your personal information or requesting you to confirm the accuracy of the information we hold on you.
Complaints
We want to resolve any complaints you have about how we process your information. You have the right to complain to the JOIC about how we have used your data.
The details for each of these contacts are:
EYECAN
Westlea Centre, Rue du Huquet
St Martin, Jersey, JE3 6HU 01534 864689 email info@eyecan.je
Jersey Office of the Information Commissioner (JOIC)
2nd Floor, 5 Castle Street, St Helier, Jersey JE2 3BT
Telephone +44 (0) 1534 716530 or email enquiries@jerseyoic.org
